【Vulnerability Alert】Broad Information Management Consultants｜ERP App - Use of Hard-coded Credentials

• Subject: 【Vulnerability Alert】Broad Information Management Consultants｜ERP App - Use of Hard-coded Credentials

• Description:
  • Forwarded TWCERT/CC Security Alert TWCERTCC-200-202607-00000004
  • 【Broad Information Management Consultants｜ERP App - Use of Hard-coded Credentials 】(CVE-2026-14807, CVSS: 9.8) The ERP App developed by Broad Information Management Consultants contains a Use of Hard-coded Credentials vulnerability. An unauthenticated remote attacker can obtain database credentials and passwords within the code.
• Affected Platforms:
  • ERP App
• Recommended Actions:
  • Contact the vendor for patching
• References:
  1. https://www.twcert.org.tw/tw/cp-132-11023-3abe8-1.html

Computer and Communication Center
Network Systems Division Sincerely